SUSE: Security Advisory (SUSE-SU-2016:2355-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for NULL Pointer Dereference in Openssl

CVE-2021-3449 OpenSSL This issue was reported to OpenSSL on 1...

CVE-2020-5746

Summary: CVE-2020-5746 is a vulnerability in Tecnick.com TCExam (version 14.2.2) characterized by insufficient output sanitization that enables a remote, authenticated attacker to perform persistent cross-site scripting (XSS) by crafting a test. Affected component: TCExam web application (TCExam ...

CVE-2018-5746

CVE-2018-5746 is rejected/not used and does not represent an active vulnerability entry.

CVE-2018-5746

...

CVE-2016-5746

CVE-2016-5746 affects libstorage, libstorage-ng, and yast-storage. The vulnerability arises from improperly storing passphrases for encrypted storage devices in a temporary file on disk (example path: /tmp/libstorage-XXXXXX/pwdf), which could allow local users to read sensitive information. Conne...

CVE-2016-5746

libstorage, libstorage-ng, and yast-storage improperly store passphrases for encrypted storage devices in a temporary file on disk, which might allow local users to obtain sensitive information by reading the file, as demonstrated by /tmp/libstorage-XXXXXX/pwdf...

SUSE SLES12 Security Update : libstorage (SUSE-SU-2016:2355-1)

This update for libstorage fixes the following issues : - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and...

SUSE-SU-2016:2355-1 Security update for libstorage

This update for libstorage fixes the following issues: - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746...

openSUSE Security Update : libstorage (openSUSE-2016-1062)

This update for libstorage fixes the following issues : - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746 This update was imported from the SUSE:SLE-12-SP1:Update update project. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

SUSE-SU-2016:2189-1 Security update for libstorage

This update for libstorage fixes the following issues: - Use stdin, not tmp files for passwords bsc986971, CVE-2016-5746...

CVE-2015-5746

Apple iOS before 8.4.1 is affected by CVE-2015-5746 via AppleFileConduit, where the afc command’s symlink handling bypasses intended filesystem access restrictions. The root cause is mishandling of symbolic links in the afc mechanism, enabling access to protected parts of the file system. Exposur...

CVE-2014-5746

The CVE-2014-5746 entry concerns the Government Best Jobs Android app (com.wGovernmentBestJobs) version 0.1, which does not verify X.509 certificates from SSL servers. This root cause enables man‑in‑the‑middle attackers to spoof servers and obtain sensitive information via a crafted certificate. ...

Slack: TLS1/SSLv3 Renegotiation Vulnerability

URL: http://www.slack.com Vulnerability description A flaw in the design of the TLS v. 1/SSL v. 3 TLS/SSL handshake process was discovered in 2009, and RFC 5746 Feb. 2010 was released to update the protocol specification. Since then, most system manufacturers have released patches to fix this fla...

Oracle Linux 3 / 4 : openssl (ELSA-2010-0163)

From Red Hat Security Advisory 2010:0163 : Updated openssl packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

Oracle Linux 3 / 4 : openoffice.org (ELSA-2008-0176)

From Red Hat Security Advisory 2008:0176 : Updated openoffice.org 1.x packages to correct multiple security issues are now available for Red Hat Enterprise Linux 3 and Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team...

Scientific Linux Security Update : openoffice.org2 on SL4.5 and 4.6 i386/x86_64

Multiple heap overflows and an integer underflow were found in the Quattro ProR import filter. An attacker could create a carefully crafted Quattro Pro file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the file was opened by a victim. CVE-2007-5745, CVE-2007-5747...

Scientific Linux Security Update : nss on SL4.x, SL5.x i386/x86_64

CVE-2009-3555 TLS: MITM attacks via session renegotiation A flaw was found in the way the TLS/SSL Transport Layer Security/Secure Sockets Layer protocols handled session renegotiation. A man-in-the-middle attacker could use this flaw to prefix arbitrary plain text to a client's session for exampl...

Scientific Linux Security Update : openoffice.org on SL3.x, SL4.x i386/x86_64

A heap overflow flaw was found in the EMF parser. An attacker could create a carefully crafted EMF file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the malicious EMF image was added to a document or if a document containing the malicious EMF file was opened by a...

Scientific Linux Security Update : openoffice.org on SL5.x i386/x86_64

Multiple heap overflows and an integer underflow were found in the Quattro ProR import filter. An attacker could create a carefully crafted Quattro Pro file that could cause OpenOffice.org to crash or possibly execute arbitrary code if the file was opened by a victim. CVE-2007-5745, CVE-2007-5747...